Vulnerabilityhigh
Research Spotlight: Exploiting Use-After
- CVEs
- CVE-2015-2096CVE-2015-1223CVE-2015-1222CVE-2015-1221CVE-2015-1220CVE-2015-1218CVE-2015-1216CVE-2015-1209CVE-2015-0831CVE-2015-0823CVE-2015-0562CVE-2015-0559CVE-2015-0361CVE-2015-0341CVE-2015-0342CVE-2015-0331CVE-2015-0313CVE-2015-0315CVE-2015-0320CVE-2015-0322CVE-2015-0308CVE-2015-0231CVE-2015-0085
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-0085 | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010… | 9.3 | — | ||
| CVE-2015-0313 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 95% | KEV | — KEV |
From the original article
2 min read at blog.talosintelligence.com
Talos is constantly researching the ways in which threat actors take advantage of security weaknesses to exploit systems. Yves Younan of Talos will be presenting at CanSecWest on Friday March 20th. The topic of his talk will be FreeSentry , a software-based mitigation technique developed by Talos to protect against exploitation of use-after-free vulnerabilities.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.